Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa
File: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (raw, json)
Hash identifier: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=
Subject key identifier: AA:BF:08:7C:C1:B4:C1:79:E8:58:A4:63:B4:03:B1:C4:04:17:BC:4B
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0194228DF164C07208789379177032C6CA71
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212941
IP address blocks: 212.225.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f1:64:c0:72:08:78:93:79:17:70:32:c6:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aabf087cc1b4c179e858a463b403b1c40417bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:3e:9b:b1:36:75:95:e7:3d:78:b3:0e:3b:
01:af:bf:64:dc:b5:f3:f1:b2:32:bc:2f:cb:ec:e1:
05:8f:e4:cd:a8:93:70:cf:cf:c2:be:28:e8:79:a6:
4c:98:31:72:2b:2d:9c:88:c2:11:13:cb:a1:5e:a5:
ab:46:6d:19:87:c6:85:5f:09:f0:8d:ec:86:ff:ed:
53:7b:f4:ce:2e:fc:11:a8:9d:e0:7c:d7:4b:0d:6b:
85:59:e0:d1:51:a0:9f:fe:22:20:18:98:6a:4c:2c:
5c:e8:41:a3:97:03:49:77:32:e2:64:f6:86:f9:92:
aa:3f:82:4d:a8:8e:03:e1:e9:61:86:a0:5b:ec:d8:
82:8a:39:0b:67:2c:1d:41:7e:c8:11:d2:ce:4b:ca:
06:79:0d:86:a0:f3:10:9c:24:20:9b:0a:cb:9f:01:
16:d8:f1:1b:c3:3f:57:3d:af:52:53:90:02:28:58:
1f:bf:bd:9d:fa:49:5d:cf:5f:3d:35:68:c9:f0:e0:
cd:d3:7f:05:1c:61:4d:87:7c:6d:1c:93:30:82:d7:
4f:5f:dd:3b:08:4c:a3:dc:74:e2:05:a1:de:99:66:
b4:39:b2:06:3f:9a:71:ef:39:62:5d:d6:f5:61:2f:
ef:d3:69:86:83:78:e7:89:63:db:98:e6:9d:11:b3:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:08:7C:C1:B4:C1:79:E8:58:A4:63:B4:03:B1:C4:04:17:BC:4B
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.225.224.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cf:20:7d:6f:8c:b0:5a:ba:84:b3:97:c5:3e:6e:fa:83:94:
ba:8b:d0:1a:39:05:63:7c:97:d5:6b:25:c0:cd:c3:8d:b3:d5:
b5:96:c7:ee:9b:6e:7b:86:cc:5d:d4:aa:de:b7:f4:20:da:b3:
d1:28:a9:8e:07:fd:3a:4c:56:06:83:af:24:3c:17:5e:cc:a3:
ea:e7:ed:97:df:af:b2:06:74:a8:1f:41:62:bc:6a:4c:84:3b:
11:4c:30:b1:f6:52:a9:96:06:98:d2:7f:95:13:d2:84:23:4c:
d2:d0:26:81:9a:bd:48:a2:fc:2e:d1:a5:72:b6:ff:7a:f6:19:
c8:b3:9b:a1:a1:f0:7d:24:58:21:42:8d:22:ea:05:e0:5c:06:
5d:a3:29:98:a4:bb:08:3a:dd:60:18:15:3a:3d:38:d5:25:7d:
94:5c:15:a2:50:61:f6:4d:d8:da:5f:36:b0:59:d1:4b:10:94:
49:89:01:2a:d0:fb:fe:20:c1:37:2e:65:0c:b3:cb:ce:1c:60:
ce:75:76:59:cf:9d:eb:0e:fd:38:9a:e3:a6:67:4c:0c:72:c9:
62:dd:8d:d4:19:86:3e:3b:23:98:47:c2:a2:e3:3a:db:6f:8c:
f1:d9:29:78:d8:8e:ae:df:2f:ea:bb:3e:da:c7:f4:7d:db:b9:
73:b3:0e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijfFkwHIIeJN5F3AyxspxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjUwMTAxMTU0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWJmMDg3Y2MxYjRjMTc5ZTg1OGE0NjNiNDAzYjFjNDA0MTdiYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AU+m7E2dZXnPXizDjsBr79k3LXz
8bIyvC/L7OEFj+TNqJNwz8/CvijoeaZMmDFyKy2ciMIRE8uhXqWrRm0Zh8aFXwnw
jeyG/+1Te/TOLvwRqJ3gfNdLDWuFWeDRUaCf/iIgGJhqTCxc6EGjlwNJdzLiZPaG
+ZKqP4JNqI4D4elhhqBb7NiCijkLZywdQX7IEdLOS8oGeQ2GoPMQnCQgmwrLnwEW
2PEbwz9XPa9SU5ACKFgfv72d+kldz189NWjJ8ODN038FHGFNh3xtHJMwgtdPX907
CEyj3HTiBaHemWa0ObIGP5px7zliXdb1YS/v02mGg3jniWPbmOadEbPgewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKq/CHzBtMF56FikY7QDscQEF7xLMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvcXI4SWZNRzB3WG5vV0tSanRBT3h4QVFYdkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OHgMA0G
CSqGSIb3DQEBCwUAA4IBAQCTzyB9b4ywWrqEs5fFPm76g5S6i9AaOQVjfJfVayXA
zcONs9W1lsfum257hsxd1Kret/Qg2rPRKKmOB/06TFYGg68kPBdezKPq5+2X36+y
BnSoH0FivGpMhDsRTDCx9lKplgaY0n+VE9KEI0zS0CaBmr1Iovwu0aVytv969hnI
s5uhofB9JFghQo0i6gXgXAZdoymYpLsIOt1gGBU6PTjVJX2UXBWiUGH2TdjaXzaw
WdFLEJRJiQEq0Pv+IME3LmUMs8vOHGDOdXZZz53rDv04muOmZ0wMcsli3Y3UGYY+
OyOYR8Ki4zrbb4zx2Sl42I6u3y/quz7ax/R927lzsw4z
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:42 2025 by rpki-client